[solved] Pacman Signatures not trusted

hippieben · 2014-01-05 01:30:47

ben@arch-desktop:~$ sudo pacman -S archlinux-keyring
warning: archlinux-keyring-20131027-1 is up to date -- reinstalling
resolving dependencies...
looking for inter-conflicts...

Packages (1): archlinux-keyring-20131027-1

Total Installed Size:   0.55 MiB
Net Upgrade Size:       0.00 MiB

:: Proceed with installation? [Y/n] 
(1/1) checking keys in keyring                     [#########################] 100%
(1/1) checking package integrity                   [#########################] 100%
error: archlinux-keyring: signature from "Pierre Schmitz <pierre@archlinux.de>" is unknown trust
:: File /var/cache/pacman/pkg/archlinux-keyring-20131027-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] n
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

Tried deleting the /etc/pacman.d/gpupg and refreshing keys, no luck

ben@arch-desktop:~$ sudo pacman-key --refresh-keys
gpg: refreshing 4 keys from hkp://pool.sks-keyservers.net
gpg: requesting key 1DBDE5EE from hkp server pool.sks-keyservers.net
gpg: requesting key 653C3094 from hkp server pool.sks-keyservers.net
gpg: requesting key 06361833 from hkp server pool.sks-keyservers.net
gpg: requesting key 9741E8AC from hkp server pool.sks-keyservers.net
gpgkeys: key 2DD280C54478C0000E232A734D090A9F1DBDE5EE not found on keyserver
gpg: key 653C3094: "Vi0L0 <vi0l093@gmail.com>" not changed
gpg: key 06361833: "Tom Gundersen <teg@jklm.no>" not changed
gpg: key 9741E8AC: "Pierre Schmitz <pierre@archlinux.de>" not changed
gpg: Total number processed: 3
gpg:              unchanged: 3

ben@arch-desktop:~$ cat /etc/pacman.conf
#
# /etc/pacman.conf
#
# See the pacman.conf(5) manpage for option and repository directives

#
# GENERAL OPTIONS
#
[options]
# The following paths are commented out with their default values listed.
# If you wish to use different paths, uncomment and update the paths.
#RootDir     = /
#DBPath      = /var/lib/pacman/
#CacheDir    = /var/cache/pacman/pkg/
#LogFile     = /var/log/pacman.log
#GPGDir      = /etc/pacman.d/gnupg/
HoldPkg     = pacman glibc
#XferCommand = /usr/bin/curl -C - -f %u > %o
#XferCommand = /usr/bin/wget --passive-ftp -c -O %o %u
#CleanMethod = KeepInstalled
#UseDelta    = 0.7
Architecture = auto

# Pacman won't upgrade packages listed in IgnorePkg and members of IgnoreGroup
IgnorePkg   = linux linux-headers
IgnoreGroup = xorg

#NoUpgrade   =
#NoExtract   =

# Misc options
#UseSyslog
#Color
#TotalDownload
CheckSpace
#VerbosePkgLists

# By default, pacman accepts packages signed by keys that its local keyring
# trusts (see pacman-key and its man page), as well as unsigned packages.
SigLevel    = Required DatabaseOptional
LocalFileSigLevel = Optional
#RemoteFileSigLevel = Required

# NOTE: You must run `pacman-key --init` before first using pacman; the local
# keyring can then be populated with the keys of all official Arch Linux
# packagers with `pacman-key --populate archlinux`.

#
# REPOSITORIES
#   - can be defined here or included from another file
#   - pacman will search repositories in the order defined here
#   - local/custom mirrors can be added here or in separate files
#   - repositories listed first will take precedence when packages
#     have identical names, regardless of version number
#   - URLs will have $repo replaced by the name of the current repo
#   - URLs will have $arch replaced by the name of the architecture
#
# Repository entries are of the format:
#       [repo-name]
#       Server = ServerName
#       Include = IncludePath
#
# The header [repo-name] is crucial - it must be present and
# uncommented to enable the repo.
#

# The testing repositories are disabled by default. To enable, uncomment the
# repo name header and Include lines. You can add preferred servers immediately
# after the header, and they will be used before the default mirrors.

[catalyst]
SigLevel = Optional TrustAll
#Server = http://catalyst.wirephire.com/repo/catalyst/$arch
Server = http://mirror.rts-informatique.fr/archlinux-catalyst/repo/catalyst/$arch

#[testing]
#Include = /etc/pacman.d/mirrorlist

[core]
Include = /etc/pacman.d/mirrorlist

[extra]
Include = /etc/pacman.d/mirrorlist

#[community-testing]
#Include = /etc/pacman.d/mirrorlist

[community]
Include = /etc/pacman.d/mirrorlist

# If you want to run 32 bit applications on your x86_64 system,
# enable the multilib repositories as required here.

#[multilib-testing]
#Include = /etc/pacman.d/mirrorlist

[multilib]
Include = /etc/pacman.d/mirrorlist

# An example of a custom package repository.  See the pacman manpage for
# tips on creating your own repositories.
#[custom]
#SigLevel = Optional TrustAll
#Server = file:///home/custompkgs

I'm at a loss, nothing on the wiki or forums or google seem to be a solution, any thoughts? Thanks.

EDIT: this is weird, ran pacman-key --populate archlinux and now it seems to work? That was also on the list of things I had tried with no positive results... perhaps it was the order in which I did it?

Last edited by hippieben (2014-01-05 01:40:04)

Allan · 2014-01-05 01:38:48

Try "pacman-key --populate archlinux"

hippieben · 2014-01-05 01:40:23

Allan wrote:

Try "pacman-key --populate archlinux"

that's what did it.

Arch Linux

#1 2014-01-05 01:30:47

[solved] Pacman Signatures not trusted

#2 2014-01-05 01:38:48

Re: [solved] Pacman Signatures not trusted

#3 2014-01-05 01:40:23

Re: [solved] Pacman Signatures not trusted

Board footer